Spam filtering for Gravity Forms that learns from you and fails open, so a problem never costs a lead.
Mark one wrong call with the Spam or Not Spam button you already use, and the next submission on that form already knows. No API key, no setup screen, no CAPTCHA for your visitors. And if anything goes wrong on our side, the entry comes through, every time.
Works with Gravity Forms 2.6+ on WordPress 6.0+, PHP 7.4+.
| Message | Date | GravityAgent |
|---|---|---|
| Do you offer emergency appointments on Saturdays? | 09:14 | Passed3%Why? |
| Buy 5,000 backlinks today, guaranteed page one ranking | 08:52 | Spam97%Why? |
| Quote for a kitchen extension, roughly 30 square metres | 08:20 | Not spam · correctedWhy? |
| Following up on my invoice from last month | 07:41 | Not scoredWhy? |
220
reviewed submissions across six synthetic sites
0
false positives on 95 genuine submissions
87.2%
of the spam
Why GravityAgent
It learns from your corrections
Every other AI spam filter for Gravity Forms makes the same mistake twice. GravityAgent records the corrections you make with Gravity Forms' own Spam and Not Spam buttons and sends the relevant ones along as examples on that form's later submissions. No training runs, no model tuning, no waiting: a correction informs future decisions immediately.
Nothing to set up
No OpenAI key to paste, no provider account to open, no WordPress 7.0 Connectors screen. Install, press Activate, switch a form on. GravityAgent reads your site's public pages itself and builds a profile of what your business does, so an enquiry about your actual services is recognised as one.
It fails open, so a problem never costs a lead
Only a clean verdict from our service can mark an entry spam. A timeout, an outage, a reached limit, an expired plan, a bug in our own code: every one of those admits the entry, flagged "Not scored" with the reason. On our benchmark of 220 reviewed submissions across six synthetic sites it produced 0 false positives on 95 genuine submissions, and caught 87.2% of the spam.
How it works
Four steps, and the fourth is the one that matters.
- 01
Install and activate. From WordPress.org, then Forms → Settings → GravityAgent → Activate this site. The free tier needs no licence key and no card.
- 02
Switch on the forms you want scored. Nothing is scored until you say so, and any field you untick never leaves your site.
- 03
Every submission is judged before notifications fire. GravityAgent runs on Gravity Forms' own spam filter, so spam is spam natively: no notification, no feed, no confirmation. Genuine entries flow exactly as before.
- 04
Correct it once. Wrong call? Press Spam or Not Spam on the entry. That correction informs that form's future decisions.
What you see in wp-admin
Nothing new to learn. Two additions where your entries already are.
| Entry | GravityAgent |
|---|---|
| #1044 · Contact form | Passed3%Why? |
| #1043 · Contact form | Spam97%Why? |
| #1042 · Contact form | Not spam · correctedWhy? |
Asks about Saturday emergency appointments, which matches the services and hours on the practice's own pages. No links, no offer, no request for payment details.
What informed this decision
Both panels are drawn from the plugin's own labels; the entry text and reasoning are samples.
Built for agencies running many sites
You will not paste an API key into twenty-five wp-admins, and neither will your clients. One GravityAgent licence covers up to 25 sites, each activated with a single click and each learning from its own corrections. The privacy page is written so you can forward it to a client's IT contact without editing it.
Privacy you can forward
Four sentences your client's IT contact will ask about.
We never store what was submitted. Not in a database, a log, a cache or a backup. The entry in WordPress is the only copy.
Nothing trains a model. Your submissions and corrections inform your site's decisions and nobody else's.
You choose what leaves the site. Exclude any field; file uploads travel as a name and label only.
Deletion follows the entry. Delete an entry and its content is gone everywhere; deactivate a site and its profile and notes are deleted immediately.
Pricing
Free for one site. Paid plans bill once a year.
Free
$0
- 1 site
- 250 scored submissions / month
- Learns from corrections
- Site profile from your public pages
- Fail-open, always
Starter
$99 / year
- 1 site
- 2,000 scored submissions / month
- Learns from corrections
- Site profile from your public pages
- Fail-open, always
Growth
$249 / year
- 5 sites
- 10,000 scored submissions / month
- Learns from corrections
- Site profile from your public pages
- Fail-open, always
Agency
$599 / year
- 25 sites
- 50,000 scored submissions / month
- Learns from corrections
- Site profile from your public pages
- Fail-open, always
Try Growth free for 14 days. No card. 1,000 scored submissions during the trial, once per customer and once per site.
No surprise bills. If a month runs past its limit, scoring pauses after a small grace allowance and submissions come through unscored. We never charge for overage; upgrading is your call.
Paid plans bill annually through Freemius, our merchant of record. Upgrades apply immediately; downgrades and cancellations take effect at the end of the period.
Honest question: why not one of the free ones?
Gravity Wiz's Spam Hexer and GravityKit's Zero Spam AI Review are both free and both good, and if you are happy to open a provider account, pay the model bill yourself, and configure each site by hand, they may be all you need. GravityAgent is for the site that has nobody to do that, and for the agency that has to do it twenty-five times. It is the only one of the three that learns from your corrections, and the only one that needs no key. Read the full comparison.
FAQ
The questions the plugin listing answers, condensed.
What happens if GravityAgent is down, or my plan lapses?
The submission is admitted and flagged "Not scored", with the reason recorded on the entry. Nothing is ever marked spam because of a failure on our side.
Does it replace my CAPTCHA or honeypot?
It can. GravityAgent judges what was written rather than whether a human wrote it, and asks nothing of your visitors. It also composes with whatever you already run: anything another filter has already marked spam is left exactly as it is, with no call made.
Which fields are sent?
Every mapped field on a scored form, minus the ones you exclude on that form's GravityAgent tab. Passwords and presentation fields are never sent. File uploads are sent as a file name and label only.
Does it slow down my forms?
One request with a three-second ceiling and no retries. If the answer has not arrived by then, the submission goes through unscored. Forms you have not enabled make no call at all.
How do I teach it about my business?
Two ways, both already in front of you. Press Spam or Not Spam on a wrong verdict, and write a sentence or two about your business in the notes field on the settings page. GravityAgent also builds a profile from your public pages automatically.
Where is my data stored?
Entries stay in WordPress. GravityAgent keeps the non-content record of a decision (ids, label, confidence) for about 90 days, and your site profile and notes until you deactivate. Stored data is held in the United States. Details are in the privacy policy.
Does it work on multisite?
Each site activates and is metered separately.
Is the plugin open source?
The WordPress plugin is GPLv2 or later. The scoring service it talks to is a hosted service we operate.